Privacy Policy

Last updated: 29 August 2026 · English summary below

1. Who are we?

Parlyo ("we") publishes a SaaS service that adds an AI advisor (chat and voice) to its customers' websites. The service is operated by Majd Hakim, sole trader (entrepreneur individuel), trading under the business name ANATOMY of AI, registered under SIREN number 521 179 150, whose registered office is located at 16 rue Pierre Mendès France, 77200 Torcy, France. Contact for any question relating to data: contact@parlyo.io (or the site's contact form).

2. What data do we process?

We collect no sensitive data and we neither sell nor rent any data to third parties.

3. Telephone calls (Parlyo Phone)

When a visitor calls a number entrusted to Parlyo, the agent informs them from its very first sentence, and before they speak, of three things: they are talking to an automated assistant, the call is recorded and transcribed, and this number does not handle emergency calls. This announcement cannot be disabled by the customer operating the number.

What is kept: the audio recording and its transcription, the number called, the calling number when the carrier transmits it, the timestamp and the duration. What is not: no payment data, no health data — the agent is instructed never to ask for any, and not to rephrase, repeat or write down any that a caller might volunteer.

For how long: the audio is automatically erased after 30 days (never more than 90), by a daily purge. The transcription and the call log are kept for the duration of the contract, then deleted when the account is closed. The files are accessible only to the customer concerned, through an authenticated address: they are never exposed publicly.

On what legal basis: the recording and the transcription rely on the legitimate interest of the customer operating the number (article 6.1.f of the GDPR) — handling the request, keeping evidence of it, improving the quality of the service. They do not rely on your consent: that is why you have a right to object, and why that right must be exercisable without depriving you of the service.

Refusing to be recorded, during the call: simply tell the agent. It is required to apologise, to direct you to the written form on the site — which records no voice — and then to end the call. You do not have to hang up to assert this right, and you retain a way to reach us.

Your rights: to obtain the erasure of a recording or transcription concerning you, write to contact@parlyo.io stating the number called and the approximate date of the call. We reply within 30 days. You may also lodge a complaint with the CNIL.

4. Cookies and local storage

The site uses no advertising cookies or third-party trackers. We use only:

• a strictly necessary session cookie for the customer area (dashboard);
• the browser's local storage for functional preferences (chosen language, guided tour already seen, monthly/annual preference);
• a random local anti-abuse identifier (widget), pseudonymous and not cross-referenced with your identity, used solely to limit demo voice usage per visitor.

As these elements are strictly functional, they do not require a consent banner.

5. Where is the data hosted?

Our servers (application, database, conversations, contacts) are hosted in the European Union (Germany).

6. Processors

7. How long do we keep the data?

• Customer account: for the duration of the subscription, then deleted no later than 30 days after a closure request.
• Conversations: rolling 12 months, or deleted earlier at the customer's request (deletion possible conversation by conversation from the dashboard).
• Contacts (leads): until deleted by the customer from their dashboard, and no later than 24 months after collection.
• Customer reviews: as long as the review is published; immediate deletion upon withdrawal of consent.
• Invoices: 10 years (accounting obligation, French Commercial Code, art. L123-22) — they are kept even if the account is deleted.
• Usage counters: 24 months (invoicing requirement), IP always truncated.

8. Your rights (GDPR)

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability over your data. Use the form below (immediate acknowledgement of receipt, reply within 30 days) or write to contact@parlyo.io. You may also refer the matter to the CNIL (cnil.fr).

Parlyo customers: you can delete your account and all your data directly from your dashboard (Account section → Delete my account) — immediate effect, no request needed. Only invoices are kept for 10 years (accounting obligation).

9. Security

• End-to-end TLS encryption (HTTPS everywhere).
• Hashed passwords (PBKDF2), no secret key exposed on the browser side.
• IP addresses truncated in logs, no conversation content in access logs.
• Access to data limited to the operator of the service.

10. Commitment

Your data is never resold, rented or shared for advertising purposes. It is used solely to run the service you have chosen.

English summary

Parlyo is a SaaS AI advisor (chat + voice) for websites, operated from France. Our servers and databases are hosted in the European Union (Germany). To generate answers, conversation text is processed by Google's Gemini API, which may involve processing outside the EU under Standard Contractual Clauses; per Google's paid-API terms, this data is not used to train models. We use no advertising cookies or third-party trackers — only a strictly necessary session cookie and functional localStorage. We process: customer accounts (email, hashed password), widget conversations, voluntarily submitted leads, and usage counters with truncated IPs. Payment cards are handled entirely by Stripe/Revolut. Retention: conversations 12 months, leads until deleted by the customer, accounts up to 30 days after closure. You have full GDPR rights (access, rectification, erasure, portability, objection): contact contact@parlyo.io. Data is never sold or shared for advertising.